Lead cyber security engineer

Dyson; Bengaluru; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Dyson in Bangalore is seeking a highly skilled Cyber Security Automation Engineer with 5+ years of experience in Security Operations, Automation, SOAR, SIEM integrations, and cloud security technologies.

You will design, develop, and maintain automation solutions to enhance threat detection, incident response, vulnerability management, and security operations efficiency.

Qualifications

• Bachelor’s degree in CS/IT with 5+ years in automation and cyber security.
• Hands-on scripting and SOAR/automation experience.
• Experience with cloud security and Azure REST integrations.

Responsibilities

• Lead design, development, deployment, and maintenance of automation solutions for security operations.
• Develop automation frameworks, API integrations, and orchestration workflows.
• Automate SOC processes: alert enrichment, triage, investigation, remediation.
• Integrate Microsoft Defender, ServiceNow, and third-party platforms via REST APIs and connectors.
• Build automated response mechanisms for phishing, malware, and account compromise.
• Improve MTTR through orchestration and automated containment.

Skills

Python

PowerShell

Bash

REST APIs

JSON

YAML

Education

Bachelor's degree in CS/IT

Certifications

Tools

StackStorm

Ansible

ServiceNow

SOAR platforms

Job description

About us

At Dyson, we are not just creating innovative, technology-enabled products; we are also breaking new ground in cybersecurity. Our products are becoming more advanced and interconnected, which means we face a constantly evolving cyber threat landscape. This requires a highly skilled candidate to join our team, with a passion for staying ahead of emerging threats and keeping our products secure.

We take a proactive approach to cybersecurity. We do not wait for threats to emerge; we anticipate them and respond with innovative solutions. This means that at Dyson, you will have the opportunity to work with innovative technologies, like artificial intelligence and machine learning, to protect our products and customers.

You will be part of a team of cybersecurity experts, utilizing the latest tools and technologies to identify and respond to threats in real-time. You will work closely with our engineering and product teams to ensure that security is integrated into every aspect of our business.

Join our team at Dyson, and you will be at the forefront of cybersecurity, working on some of the most innovative and advanced products in the industry. You will have the opportunity to develop your skills and knowledge, collaborating with a talented team of experts to ensure we are always secure. If you are passionate about cybersecurity and looking for an exciting and challenging role, Dyson is the place for you.

About the role

Lead Automation Engineer

Experience

5+ Years

Location

Bangalore

Employment Type

Full-Time

Job Summary

We are seeking a highly skilled Cyber Security Automation Engineer with 5+ years of experience in Security Operations, Security Automation, SOAR, SIEM integrations, and cloud security technologies. The ideal candidate will be responsible for designing, developing, and maintaining automation solutions that enhance threat detection, incident response, vulnerability management, and security operations efficiency.

This role requires strong expertise in scripting, orchestration platforms, API integrations, and modern security technologies to reduce manual effort and improve security posture across the organization.

Key Responsibilities

• Lead the design, development, deployment, and maintenance of enterprise-wide cybersecurity automation solutions to improve operational efficiency, scalability, and service reliability.
• Develop automation frameworks, API integrations, orchestration workflows, and self-service capabilities to reduce manual effort and streamline security operations.
• Automate SOC processes, including alert enrichment, triage, incident investigation, and remediation, to enhance operational effectiveness and consistency.
• Integrate Microsoft Defender, ServiceNow, and third-party security platforms through REST APIs, custom connectors, and automation workflows.
• Build and maintain automated response mechanisms for phishing, malware, account compromise, insider threats, and other cybersecurity incidents.
• Implement threat intelligence enrichment, IOC validation, and contextual analysis workflows to accelerate investigations and improve threat detection.
• Automate vulnerability management processes, enhancing remediation tracking, risk visibility, and reporting capabilities.
• Develop cloud security automation solutions for Microsoft Azure using Azure Logic Apps, Azure Functions, Automation Runbooks, and related cloud-native services.
• Improve incident response efficiency and reduce Mean Time to Respond (MTTR) through orchestration, automated containment, and remediation actions.
• Collaborate with SOC analysts, incident responders, security engineers, and business stakeholders to identify automation opportunities and optimize security operations.
• Contribute to enterprise cybersecurity automation strategy, architecture design, technology evaluation, and continuous process improvement initiatives.
• Design, develop, and deploy Agentic AI and intelligent automation solutions, including AI agents, Retrieval-Augmented Generation (RAG) applications, and autonomous workflows, to enhance incident investigation, knowledge retrieval, decision support, and remediation activities.
• Ensure all automation and AI-driven solutions adhere to Responsible cybersecurity standards, governance requirements, compliance obligations, and organizational security policies.
• Establish automation best practices, coding standards, governance frameworks, and operational metrics to ensure maintainability, reliability, and scalability of automation platforms.

Required Technical Skills

• Strong hands-on experience with Python, PowerShell, Bash, REST APIs, JSON, and YAML.
  Strong hands-on experience with StackStorm, Ansible, ServiceNow, and SOAR platforms.
• Demonstrated knowledge of cybersecurity principles, technologies, and best practices, with hands-on experience in web security, infrastructure and platform security, identity and access management (IAM), incident response, threat management, and security protocols, including those associated with open-source technologies.
• Strong knowledge on Cloudflare, Burp Suite, Claroty, Delinea, PRISMA - Cloud Security, Qualys, Recorded Future, Microsoft Defender XDR and Microsoft Entra ID
• Strong knowledge of event-driven architecture, including the integration of traditional applications and data resources.
• Hands-on experience with Agentic AI, Azure OpenAI, Microsoft Copilot Studio, LiteLLM, LangChain, LangGraph, RAG architectures, AI Search, Vector Databases, Prompt Engineering, and AI Agent orchestration frameworks is highly desirable.

Qualifications

Bachelor’s degree in Computer Science, Information Technology, or a related field, with 5+ years of experience in Automation Engineering, Cyber Security and Cloud Technologies

Preferred Certifications

Relevant technical, cybersecurity, automation, and cloud certifications are highly desirable. Preferred certifications include CISSP, CISM, ITIL, Red Hat Ansible Automation, AWS Security Specialty, and other industry-recognized cloud, security, automation, or AI certifications.

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.